Certificate
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
File: SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer (raw, json)
Hash identifier: KF3zXmmtTCD2OS1hMjtZGCGEI7HR3b96kSDHLWBTnNI=
Subject key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540
Certificate serial: CB39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft
caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/
Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml
Certificate not before: Fri 21 Mar 2025 03:12:17 +0000
Certificate not after: Sat 27 Sep 2025 02:40:14 +0000
Subordinate resources: AS: 151291
IP: 49.128.4.0/22
IP: 103.31.236.0/22
IP: 103.244.116.0/22
IP: 223.29.252.0/22
IP: 2403:6380::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52025 (0xcb39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0000
Validity
Not Before: Mar 21 03:12:17 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:75:82:1d:19:33:ce:c8:2a:a9:38:6a:9b:ee:
e8:1b:87:35:fe:af:2b:87:59:0f:4a:ba:18:16:b3:
ec:eb:3d:62:2f:0e:43:9e:5f:84:3c:c6:51:14:7e:
cc:9a:2b:4a:87:b3:74:46:50:27:f7:4e:c1:8c:c0:
2f:9a:86:32:c5:bc:c8:82:bb:c0:c6:49:f5:62:b1:
86:a0:37:29:34:dd:32:44:c2:ff:f2:ce:c2:a2:19:
fc:90:8e:6c:e2:17:01:4e:2e:32:42:0e:b4:ad:ba:
a6:50:df:5e:b2:bb:54:0a:7a:ae:aa:aa:2e:ed:6c:
17:cc:f8:d0:d6:06:49:84:2c:8d:0a:1c:9f:14:63:
a0:fd:54:f3:b6:d4:d0:06:70:56:bb:17:9c:1a:06:
42:a0:60:77:31:9c:6e:d1:49:69:e7:f7:ba:c4:2a:
70:fd:a3:90:41:37:27:f5:a6:2c:f8:95:bd:bd:19:
1f:f8:1c:ba:73:a1:fb:37:0c:29:64:5a:c5:05:33:
43:5c:40:c6:be:f9:5d:62:50:82:f1:03:71:68:d3:
e9:db:c1:81:ac:6b:75:ac:b0:b8:e0:95:fb:88:56:
bf:b0:82:38:f9:85:d1:c7:13:bb:03:8b:62:f3:ec:
45:98:ce:fd:14:54:89:12:69:32:bd:f5:60:7b:5b:
c1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
X509v3 Authority Key Identifier:
keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Subject Information Access:
CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/
RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151291
sbgp-ipAddrBlock: critical
IPv4:
49.128.4.0/22
103.31.236.0/22
103.244.116.0/22
223.29.252.0/22
IPv6:
2403:6380::/32
Signature Algorithm: sha256WithRSAEncryption
9a:c0:34:b3:d8:b0:44:2b:d9:46:b3:5b:3c:d0:34:1b:97:5b:
a3:74:8a:1f:57:d3:b8:48:bc:ec:1e:0a:29:09:f5:4d:ae:5f:
1b:07:91:f5:58:1f:5f:f6:96:77:0a:5e:89:de:d7:7f:e7:c0:
96:57:4e:25:32:a3:20:83:6d:f4:78:f4:a5:df:0b:1c:37:9f:
e5:46:ca:36:06:91:5b:a9:38:9b:6d:c1:42:12:3f:b5:8d:ff:
05:5b:21:b7:13:62:bd:fa:1e:73:d2:e1:1c:ed:b7:95:a3:97:
ca:43:d5:ec:cb:29:45:97:fb:7c:c4:4a:2d:e7:b9:4e:77:c0:
7e:3f:53:14:7c:5e:28:48:c8:a3:ce:d1:2a:7d:e4:7f:8b:b0:
7c:c1:5b:84:0c:ff:26:11:64:ff:63:ce:cc:f4:67:c4:11:e1:
4f:97:6a:19:af:05:7d:29:ae:fc:1f:bc:42:6c:9b:25:29:16:
36:9f:54:b4:e1:d4:b8:80:58:3e:25:c9:ce:79:d8:c0:41:2f:
8e:e8:c5:00:f4:16:9a:48:d6:b4:8c:f8:d9:45:26:18:35:50:
07:33:5f:b5:3e:1b:a8:46:a2:23:da:95:ac:26:98:dd:df:b0:
5f:e0:83:c1:47:6b:1d:10:69:41:bd:c8:33:61:9b:56:14:26:
c4:63:7d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:19:48 2025 by rpki-client